CVE-2018-1000175

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2018-1000175
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000175.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-1000175
Aliases
Published
2018-05-08T15:29:00Z
Modified
2024-09-03T02:01:20.510828Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arbitrary files on the Jenkins master.

References

Affected packages

Git / github.com/jenkinsci/htmlpublisher-plugin

Affected ranges

Type
GIT
Repo
https://github.com/jenkinsci/htmlpublisher-plugin
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8a90a0f78385617c9c7913fee08bd2ee798de853

Affected versions

htmlpublisher-0.*

htmlpublisher-0.5
htmlpublisher-0.6
htmlpublisher-0.7
htmlpublisher-0.8

htmlpublisher-1.*

htmlpublisher-1.0
htmlpublisher-1.1
htmlpublisher-1.10
htmlpublisher-1.11
htmlpublisher-1.12
htmlpublisher-1.13
htmlpublisher-1.14
htmlpublisher-1.15
htmlpublisher-1.2
htmlpublisher-1.3
htmlpublisher-1.4
htmlpublisher-1.5
htmlpublisher-1.6
htmlpublisher-1.7
htmlpublisher-1.8
htmlpublisher-1.9